Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2016-10607openframe-glsviewer is a Openframe extension which adds support for shaders via glslViewer.npm · openframe-glslviewer
- CVE-2016-10608robot-js is a module for native system automation for node.js.npm · robot-js
- CVE-2016-10609chromedriver126 is chromedriver version 1.26 for linux OS.npm · chromedriver126
- CVE-2016-10612dalek-browser-ie-canary is Internet Explorer bindings for DalekJS.npm · dalek-browser-ie-canary
- CVE-2016-10613bionode-sra is a Node.js wrapper for SRA Toolkit.npm · bionode-sra
- CVE-2016-10614httpsync is a port of libcurl to node.js.npm · httpsync
- CVE-2016-10615curses is bindings for the native curses library, a full featured console IO library.npm · curses
- CVE-2016-10616openframe-image is an Openframe extension which adds support for images via fbi.npm · openframe-image
- CVE-2016-10617box2d-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.npm · box2d-native
- CVE-2016-10618node-browser is a wrapper webdriver by nodejs.npm · node-browser
- CVE-2016-10619pennyworth is a natural language templating engine.npm · pennyworth
- CVE-2016-10620atom-node-module-installer installs node modules for atom-shell applications.npm · atom-node-module-installer
- CVE-2016-10621fibjs is a runtime for javascript applictions built on google v8 JS.npm · fibjs
- CVE-2016-10623macaca-chromedriver-zxa is a Node.js wrapper for the selenium chromedriver.npm · macaca-chromedriver-zxa
- CVE-2016-10624selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver downloads binary renpm · selenium-chromedriver
- CVE-2016-10628selenium-wrapper is a selenium server wrapper, including installation and chrome webdriver.npm · selenium-wrapper
- CVE-2016-10629nw-with-arm is a NW Installer including ARM-Build.npm · nw-with-arm
- CVE-2016-10630install-g-test downloads resources over HTTP, which leaves it vulnerable to MITM attacks.npm · install-g-test
- CVE-2016-10631jvminstall is a module for downloading and unpacking jvm to local system.npm · jvminstall
- CVE-2016-10632apk-parser2 is a module which extracts Android Manifest info from an APK file.npm · apk-parser2
- CVE-2016-10633dwebp-bin is a dwebp node.js wrapper that convert WebP into PNG.npm · dwebp-bin
- CVE-2016-10634scala-standalone-bin is a Binary wrapper for ScalaJS.npm · scalajs-standalone-bin
- CVE-2018-3755XSS in sexstatic <=0.6.2 causes HTML injection in directory name(s) leads to Stored XSS when malicious file is embed with <iframe> element unpm · sexstatic
- CVE-2015-9239ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.npm · ansi2html
- CVE-2016-10520jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.npm · jadedown
- CVE-2016-10521jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in to the emailAddress vnpm · jshamcrest
- CVE-2016-10552igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.npm · igniteui
- CVE-2016-10561Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`.npm · bitty
- CVE-2016-10584dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS.npm · dalek-browser-chrome-canary
- CVE-2016-10590cue-sdk-node is a Corsair Cue SDK wrapper for node.js.npm · cue-sdk-node